Consolidation pass: HR-only access, effective-dated mutations, data integrity guards, test suite

Reworks the app from a two-role (hr_admin/manager) model to a single
HR-only role gated by profiles.is_active, fixes transfer/promote/karenz/
reorg RPCs to actually defer future-dated changes via a new
pending_org_changes table instead of writing them immediately (applied
by a daily Vercel Cron route), makes reorg undo append-only instead of
deleting history, adds Karenz-return and history-date integrity guards,
deprecates the salary column, and adds explicit schema grants + perf
indexes needed to run against a fresh (non-hosted) Postgres instance.

Adds vitest unit + integration test suites (the latter against a real
local Supabase instance) covering all of the above, plus lint/typecheck/
build wiring (`npm run check`).

components/employees/panels/DatenAendernPanel.tsx

@@ -9,7 +9,7 @@ import { useToast } from "@/components/ui/Toast";
 import { UN_COUNTRIES } from "@/lib/countries";
 import type { ContractType, Database, EmploymentType, GenderType } from "@/lib/supabase/types";
 
-type EmployeeRow = Database["public"]["Views"]["employees_directory"]["Row"];
+type EmployeeRow = Database["public"]["Tables"]["employees"]["Row"];
 
 export function DatenAendernPanel({ open, onClose, employee }: { open: boolean; onClose: () => void; employee: EmployeeRow }) {
   const { showToast } = useToast();

components/employees/panels/KarenzPanel.tsx

@@ -9,7 +9,7 @@ import { useToast } from "@/components/ui/Toast";
 import { fmtDate } from "@/lib/format";
 import type { Database } from "@/lib/supabase/types";
 
-type EmployeeRow = Database["public"]["Views"]["employees_directory"]["Row"];
+type EmployeeRow = Database["public"]["Tables"]["employees"]["Row"];
 type Mode = "adjust" | "return";
 type EmploymentMode = "unverändert" | "Vollzeit" | "Teilzeit";
 

components/employees/panels/PromotePanel.tsx

@@ -7,7 +7,7 @@ import { SlideOver } from "@/components/ui/SlideOver";
 import { useToast } from "@/components/ui/Toast";
 import type { Database, PaygradeType } from "@/lib/supabase/types";
 
-type EmployeeRow = Database["public"]["Views"]["employees_directory"]["Row"];
+type EmployeeRow = Database["public"]["Tables"]["employees"]["Row"];
 
 const PAYGRADES: { value: PaygradeType; label: string }[] = [
   { value: "A", label: "A – Einstieg" },
@@ -23,12 +23,11 @@ export function PromotePanel({ open, onClose, employee }: { open: boolean; onClo
   const router = useRouter();
   const [effectiveDate, setEffectiveDate] = useState("");
   const [newTitle, setNewTitle] = useState(employee.job_title);
-  const [newSalary, setNewSalary] = useState(String(employee.monthly_salary_gross ?? ""));
   const [paygrade, setPaygrade] = useState<PaygradeType>(employee.paygrade);
   const [pending, setPending] = useState(false);
 
   async function handleSubmit() {
-    if (!effectiveDate || !newTitle || !newSalary) {
+    if (!effectiveDate || !newTitle) {
       showToast("Bitte alle Pflichtfelder ausfüllen.", "error");
       return;
     }
@@ -37,7 +36,6 @@ export function PromotePanel({ open, onClose, employee }: { open: boolean; onClo
       employee_id: employee.id,
       effective_date: effectiveDate,
       new_title: newTitle,
-      new_salary: Number(newSalary),
       new_paygrade: paygrade,
     });
     setPending(false);
@@ -85,15 +83,6 @@ export function PromotePanel({ open, onClose, employee }: { open: boolean; onClo
           <label className="mb-1 block text-sm font-semibold text-ink">Neue Position*</label>
           <input value={newTitle} onChange={(e) => setNewTitle(e.target.value)} className="w-full rounded border border-border px-3 py-2 text-sm" />
         </div>
-        <div>
-          <label className="mb-1 block text-sm font-semibold text-ink">Neues Bruttogehalt (14x/Jahr)*</label>
-          <input
-            type="number"
-            value={newSalary}
-            onChange={(e) => setNewSalary(e.target.value)}
-            className="w-full rounded border border-border px-3 py-2 text-sm"
-          />
-        </div>
         <div>
           <label className="mb-1 block text-sm font-semibold text-ink">Paygrade</label>
           <select

components/employees/panels/RehirePanel.tsx

@@ -8,7 +8,7 @@ import { useToast } from "@/components/ui/Toast";
 import { fmtDate } from "@/lib/format";
 import type { Database } from "@/lib/supabase/types";
 
-type EmployeeRow = Database["public"]["Views"]["employees_directory"]["Row"];
+type EmployeeRow = Database["public"]["Tables"]["employees"]["Row"];
 
 export function RehirePanel({ open, onClose, employee }: { open: boolean; onClose: () => void; employee: EmployeeRow }) {
   const { showToast } = useToast();

components/employees/panels/TerminatePanel.tsx

@@ -7,7 +7,7 @@ import { SlideOver } from "@/components/ui/SlideOver";
 import { useToast } from "@/components/ui/Toast";
 import type { Database } from "@/lib/supabase/types";
 
-type EmployeeRow = Database["public"]["Views"]["employees_directory"]["Row"];
+type EmployeeRow = Database["public"]["Tables"]["employees"]["Row"];
 
 const EXIT_REASONS = ["Einvernehmliche Auflösung", "Kündigung AN", "Kündigung AG", "Befristungsablauf", "Pensionierung", "Entlassung"];
 const CHECKLIST_ITEMS = ["IT-Zugänge deaktivieren", "Hardware retournieren", "ÖGK-Abmeldung", "Endabrechnung & Dienstzeugnis"];

components/employees/panels/TransferPanel.tsx

@@ -7,7 +7,7 @@ import { SlideOver } from "@/components/ui/SlideOver";
 import { useToast } from "@/components/ui/Toast";
 import type { Database } from "@/lib/supabase/types";
 
-type EmployeeRow = Database["public"]["Views"]["employees_directory"]["Row"];
+type EmployeeRow = Database["public"]["Tables"]["employees"]["Row"];
 type Division = Database["public"]["Tables"]["divisions"]["Row"];
 type Department = Database["public"]["Tables"]["departments"]["Row"];
 type Team = Database["public"]["Tables"]["teams"]["Row"];